VcenterKiller

VcenterKiller -1.ملاحظة أيها الإخوة الذين يقومون بإعداد بيئة الثغرات محليًا، فإن استخدام vckiller للتحقق من log4j سيفشل غالبًا، لأنه في بيئة VMware مع وضع NAT، سيتم تحديد بطاقة الشبكة الصادرة لوحدة التحقق على أنها 127.0.0.1، وبالتالي يصبح عنوان خادم LDAP الذي يصل إليه الهدف 127.0.0.1، مما يؤدي إل...

CVE-2019-2725-POC

CVE-2019-2725-POC CVE-2019-2725-POC Modifiez l'adresse du webshell dans le fichier txt pour y mettre la vôtre, puis utilisez burpsuite pour envoyer une requête POST au serveur cible ; le contenu de la requête correspond au contenu du fichier txt...

proxylogon-exploit

proxylogon إثبات المفهوم لاستغلال CVE-2021-26855 و CVE-2021-27065، والذي يسمح بتنفيذ أوامر عن بعد بدون مصادقة على Microsoft Exchange كما هو موضح في الموارد التالية: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell 一个bash脚本，演示如何手动利用CVE-2016-10204攻击目标端点，最终上传一个PHP webshell。 目前，webshell变量设置为针对MySQL的payload。可以根据需要替换为其他后端。 有关此CVE的更多信息，请参阅以下来源： https://nvd.nist.gov/vuln/detail/CVE-2016-10204 https://www.exploit-db.com/exploits/41239 https://www.openwall.com/lists/oss-security/2017/02/05/1...

struts2-tool

Инструмент обнаружения и эксплуатации уязвимостей Struts2 s2tool Инструмент обнаружения и эксплуатации уязвимостей S2-045 / S2-046 CVE-2017-5638 в Struts2, реализованный полностью на Java. Модуль обнаружения охватывает уязвимости S2-045 / S2-046, модуль эксплуатации предоставляет возможности...

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - Téléversement de fichier arbitraire non authentifié ⚠️ Avertissement root@kitploit: CET OUTIL EST FOURNI UNIQUEMENT À DES FINS ÉDUCATIVES ET DE RECHERCHE EN SÉCURITÉ. L'accès non autorisé à des systèmes informatiques est illégal. Utilisez cet outil uniquement...

CVE-2022-29464

CVE-2022-29464 استغلال CVE-2022-29464 POC https://github.com/superzerosec/CVE-2022-29464 https://github.com/hakivvi/CVE-2022-29464 بناءً عليه، تمت إضافة وظائف الكشف ورفع الملفات التعسفية. مؤلف الثغرة: superzerosec المؤلف الأصلي: hakivvi الاستخدام وسائط اختيارية: -h, --help عرض رسالة المساعدة...

Exploit-CVE-2026-1357

Installer les dépendances pip3 install pycryptodome requests Exploit de base python3 wpvivi.py http://target.com Webshell personnalisée python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Explication technique : Null Byte Key : Lorsque le...

cve-2017-7269-tool

cve-2017-7269 أداة webshell و shellcode البناء root@kitploit: csc cve-2017-7269.cs الاستخدام root@kitploit: CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 POC 익스플로잇 사용법 root@kitploit: usage: exploit.py -h -u URL -l LIST -w WEBSHELL optional arguments: -h, --help show this help message and exit -u URL, --url URL Target url, http://localhost:9443 -l LIST, --list LIST List of target url saperated with new line -w WEBSHELL...

CVE-2026-70376

CVE-2026-70376 — CSRF à l'échelle du site sur Pluck CMS → RCE Vérification Referer en fail-open + absence de jetons CSRF + téléversement à double extension Une seule visite de page d'un administrateur supprime du contenu, injecte des pages et dépose un webshell...

CVE-2026-61639

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...

CVE-2026-61639 Wallos: Zip Slip path traversal in database restore writes files to webroot

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 تنفيذ أوامر عن بعد غير موثوق في TerraMaster TOS عبر استنساخ كائن PHP الاستخدام الكشف عن الثغرات. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 رفع شيل ويب PHP. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 المراجع...

CVE-2026-5027-Langflow

CVE-2026-5027 et CVE-2026-10520 CVE-2026-25089 exploiteur : Clone root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Usage du fichier exploit.py Test et exploitation automatiques. root@kitploit: python3 exploit.py -u https://target.com...

PT-2026-83992

Name of the Vulnerable Software and Affected Versions Wallos versions prior to 4.9.6 Description An issue exists where the application fails to validate entry names for directory traversal sequences when processing zip files. An administrator can upload a specially crafted zip archive to the 'POS...

CVE-2026-72592

An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...

CVE-2026-72592 dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload

An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...

CVE-2026-71262

IoTSharp’s BlobStorageController is missing authorization and lacks a global authorization policy, making Upload/Download/List/Modify/Delete endpoints accessible without authentication. The endpoints pass path/filename parameters to blob storage without sanitization, enabling path traversal to wr...

📄 WordPress YayExtra 1.3.6 Unauthenticated Shell Upload

WordPress YayExtra WooCommerce Extra Product Options plugin version 1.3.6 suffers from an unauthenticated shell upload vulnerability that achieves remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the affected plugin. !/usr/bin/env python3 Explo...